Bed, Bath & Beyond’s breach non-reaction, Spirit Halloween wins with meme and more

Bed, Bath & Beyond provided incomplete details after company data was accessed through a phishing attack, according to a TechCrunch report.

The company said in a filing to the U.S. Securities and Exchange Commission that someone obtained access to an employee’s hard drive and other shared drives.

Bed, Bath & Beyond said in the filing that while the investigation was ongoing, there was “no reason to believe” that sensitive or personally identifiable information was accessed or if the cybersecurity incident would have an impact on the company.

In addition, TechCrunch reported that Bed, Bath & Beyond chief legal officer Arlene Hong, via a spokesperson who would not provide their name, declined to disclose what data types of information the attacker was able to access.

Why it matters: When it comes to data beaches, transparency is the only policy. Bed, Bath & Beyond’s initial filing left some questions unanswered. And the company didn’t help matters after declining comment to the media. If the company doesn’t have answers yet, they should have said that clearly and provided a timeline.

Spirit Halloween finished its critical season by jumping on a huge social media trend about the store’s costume offerings.